Security and Privacy
Built with privacy: pillphill (iOS) introduced the 1.1 update with the ability to store historic counts, inventory counts, and other information locally on your iOS device. In addition to standard security practices*, we added the following measures to the app:
User accounts
Understanding clinics may have a single shared device to run pillphill, we introduced pin-code protected local user accounts.
AES-256 encryption + SHA-2
A healthcare industry standard.
Data integrity
Change logs keep track of actions to make it possible for data audits.
Paper + digital data backup
Health records can be backed up into standard file formats (PNG/PDF/TXT) that work without pillphill.
HIPAA compatible**
pillphill features the necessary security features needed to be integrated into an organization's HIPAA policy.
*pillphill cannot mitigate security vulnerabilities associated with poor practice. Some poor security practices include: non-password protected local device, not password protecting the app with a local user account, sharing passwords/passcodes, and not logging off/switching users promptly.
**as of right now, pillphill cannot be used independently as a pharmacy management solution as pillphill is missing features required for HIPAA compliance such as the notification policy. It is up to you and your organization to implement the required policies. The statement above refers to pillphill using the required encryption standards needed to be used in a HIPAA environment.